IDS and IPS
* [[snort]] . . .
1K - last updated 2016-12-07 23:41 UTC by 1433
snort
snort is an open source package that runs under most OSs including Windows. It can be run in few modes: . . . * sniffing snort -dev -d stands for data (payload) -e - for Ethernet . . . -v - display on a screen * sniffing and logging snort -de -l ./log.pcap -b snort -dev -r ./log.pcap . . . logging * Intrusion Detection System (IDS) vi snort.conf config policy_mode:tap or config policy_mode:inline_test . . . snort -c snort.conf * Intrusion Prevention System (IPS) . . .
13K - last updated 2016-12-08 10:39 UTC by 1433
2 pages found.